Cyber Threat Intelligence Analyst

Role Overview:

We are looking for a motivated Threat Intelligence Analyst with 2+ years of experience in cyber threat intelligence, OSINT, and malware/vulnerability research. The candidate will be responsible for monitoring cyber threats, analyzing attacker activities, producing intelligence reports, and supporting the SOC and incident response teams with actionable intelligence.

Key Responsibilities:

• Monitor cyber threats from open-source, commercial, and dark web intelligence sources.
• Analyze Indicators of Compromise (IOCs) such as IPs, domains, URLs, file hashes, and email addresses.
• Research ransomware groups, APT campaigns, malware families, and emerging cyber threats.
• Prepare daily, weekly, and monthly threat intelligence reports.
• Produce technical and executive-level reports with actionable recommendations.
• Track newly disclosed CVEs and assess their impact on customers or internal infrastructure.
• Perform OSINT investigations using various intelligence sources.
• Enrich threat data using platforms such as VirusTotal, Shodan, Censys, AbuseIPDB, GreyNoise, and AlienVault OTX.
• Support SOC analysts by providing threat context and IOC validation.
• Map attacker Tactics, Techniques, and Procedures (TTPs) to the MITRE ATT&CK Framework.
• Maintain and update threat intelligence repositories and IOC databases.
• Collaborate with incident response and security teams during investigations.

Required Skills

• Good understanding of cyber attack lifecycle and threat intelligence concepts.
• Knowledge of ransomware, phishing, malware, botnets, and APT groups.
• Experience with OSINT and IOC analysis.
• Understanding of MITRE ATT&CK Framework.
• Familiarity with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or Elastic.
• Basic understanding of networking, DNS, HTTP/HTTPS, TCP/IP, and common protocols.
• Experience with Linux and Windows operating systems.
• Strong analytical and report-writing skills.

Preferred Skills:

• Experience with Threat Intelligence Platforms (MISP, OpenCTI, ThreatConnect, etc.).
• Basic scripting knowledge in Python or PowerShell.
• Familiarity with YARA, Sigma, or Suricata rules.
• Knowledge of malware analysis and digital forensics is an advantage.

Deliverables:

• Daily Threat Intelligence Bulletin
• Weekly Threat Landscape Report
• IOC Analysis Reports
• CVE Impact Assessment Reports
• Ransomware Monitoring Reports
• Executive Threat Summary
• Technical Threat Investigation Reports

Soft Skills:

• Strong analytical and critical thinking abilities.
• Excellent written and verbal communication.
• Ability to present findings clearly to technical and non-technical audiences.
• Good documentation and report-writing skills.
• Team player with a proactive approach to learning.

About:

Innspark is a deep-tech, product-based OEM specializing in cybersecurity products, AI, cloud solutions, and select hardware offerings such as drones, VTS, and telemedicine systems, with a diverse and evolving portfolio. To learn more, please visit our website: https://innspark.in..